Latest AI JobsBrowse Jobs
Cloudflare logo

Product Security Engineer

CloudflareHybridSecurity
Apply on company site
Salary
Not listed
Job type
Full-time
Posted
4 Aug 2026
Status
Open · checked 7d ago

About this role

Role Overview

The Product Security Engineer position at Cloudflare involves supporting security assessments and vulnerability operations for the company's core software products. This hybrid role is well-suited for professionals who enjoy analyzing system architecture, threat modeling new features, and building automated security tools.

Key Responsibilities

Implement AI Security Solutions: Build AI-driven tools or scripts to help automate code analysis, optimize triage, and streamline Product Security workflows.
Security Reviews and Threat Modeling: Conduct structured security reviews and threat modeling sessions across product features to define security requirements early in the development lifecycle.
Product Vulnerability Management: Manage the operational lifecycle of product security findings, ensuring vulnerabilities are verified, mapped to the correct engineering owner, and tracked to mitigation.
Bug Bounty Triage: Perform technical triage and validation of external Bug Bounty submissions to verify exploitability and evaluate business risk.
Pentest Coordination: Support internal and external penetration testing engagements by reviewing findings, clarifying technical context, and assisting development teams with remediation.
Engineering Collaboration: Partner closely with DevOps and product teams to act as a reliable security point of contact and help developers implement secure coding practices.

Requirements

Bring 5+ years of experience in Product or Application Security within large-scale distributed cloud environments or SaaS platforms.
Demonstrate practical ability to build production-grade automation scripts and tools, including hands-on experience leveraging AI/LLMs to solve technical challenges.
Possess competency in threat modeling methodologies and the ability to evaluate code flaws for actual engineering and security impact.
Exhibit experience tracking, routing, and driving the remediation of software vulnerabilities across engineering groups against defined SLAs.
Show strong collaboration and communication skills to effectively articulate technical security risks to software engineers.

Nice to Have

Familiarity with modern exploitation techniques, fuzzing frameworks, or automated scanning utilities.
Experience scaling crowdsourced security programs or optimizing agile project management workflows within JIRA.
Experience integrating hardware security features into production code bases.

Skills and Tools

LLM
Product Security and Application Security
Threat Modeling and Risk Analysis
Vulnerability Management
Automation Scripting

Salary and Benefits

Equity: This role is eligible to participate in Cloudflare’s equity plan.
Health & Welfare Benefits: Medical, Rx, dental, and vision insurance, along with flexible spending accounts, commuter spending accounts, and fertility and family forming benefits.
Financial Benefits: Short and long-term disability insurance, life and accident insurance, 401(k) retirement savings plan, and employee stock participation plan.
Time Off: Flexible paid time off covering vacation and sick leave, plus leave programs including parental, pregnancy health, medical, and bereavement leave.

About the Company

Cloudflare runs a massive global network powering millions of internet properties, helping build a better internet through performance, acceleration, and security services. Recognized for its innovative culture and impactful initiatives like Project Galileo and the Athenian Project, Cloudflare values curiosity, iteration, and collaboration over bureaucracy.

How to Apply

To apply for this position, please visit the official Cloudflare careers page.

Skills and tech stack

LLM

Questions candidates ask

What experience is required for the Product Security Engineer role?

Candidates must have 5+ years of experience in Product or Application Security within large-scale distributed cloud environments or SaaS platforms.

What are the primary responsibilities of this position?

Responsibilities include implementing AI security solutions, conducting security reviews and threat modeling, managing product vulnerability lifecycles, triaging bug bounties, coordinating pentests, and collaborating with engineering teams.

Is remote work available for this role?

The position is listed as hybrid, with available locations in Austin (US) and London (UK).

What benefits does Cloudflare offer employees in the United States?

U.S. employees receive medical, dental, vision, flexible spending accounts, disability and life insurance, a 401(k) plan, an employee stock participation plan, flexible paid time off, and various leave programs.

How do I apply for the Product Security Engineer position?

You can apply directly on the official Cloudflare careers page.

Ready to apply?

The application is on the official Cloudflare careers page.

Apply on company site